Classifications

• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
  • G07C1/00—Registering, indicating or recording the time of events or elapsed time, e.g. time-recorders for work people
  • G07C1/10—Registering, indicating or recording the time of events or elapsed time, e.g. time-recorders for work people together with the recording, indicating or registering of other data, e.g. of signs of identity
• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
  • G07C9/00—Individual registration on entry or exit
  • G07C9/30—Individual registration on entry or exit not involving the use of a pass
  • G07C9/32—Individual registration on entry or exit not involving the use of a pass in combination with an identity check
  • G07C9/37—Individual registration on entry or exit not involving the use of a pass in combination with an identity check using biometric data, e.g. fingerprints, iris scans or voice recognition
• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
  • G07C9/00—Individual registration on entry or exit
  • G07C9/30—Individual registration on entry or exit not involving the use of a pass
  • G07C9/38—Individual registration on entry or exit not involving the use of a pass with central registration

Definitions

• the present invention relates to working time recording and working time monitoring methods and a corresponding control and working time recording system in which user data are recorded by a data recording client and transmitted to a central unit.
• the user is identified on the basis of the user data by means of a user database and, if the identification is successful, the time and / or location of the acquisition of the user data is stored in a data record assigned to the user and / or further evaluated.
• the present invention relates to a method and a system for recording working times in access-controlled buildings or mobile users.
• a first work status such as the start of a user's work time
• a second work status such as the end of a user's work time
• user identification for example by means of a magnetic card, user ID (ID: identification number) or a so-called stamp card, in order to ensure a clear assignment of the working time to a specific worker or user.
• stamp card a so-called stamp card
• user data are acquired by a data acquisition client and transmitted to a central unit via a first communication channel, based on soft user data
• the user is identified by means of a user database
• the data acquisition client being biometric data and / or body status data of the user is recorded using an input unit of the data acquisition client and transmitted together with the user data to the central unit via a first communication channel
• the central unit comparing the transmitted biometric data with biometric data of users stored in the user database and a user using the central unit is identified if the probability of a match between the transmitted biometric data and certain stored biometric data above a predefinable threshold value l
• at least one user status assigned to a data record of the identified user is modified and stored based on the time and / or location of the acquisition of the user data, and the data records of the user are transmitted to a wage recording module and evaluated and / or by means of the wage recording module be checked.
• the biometric data can be, for example, fingerprints, iris recognition, DNS analysis etc. include.
• the body condition data can include, for example, body temperature, blood values (eg blood sugar etc.), alcohol values, pulse etc.
• the advantage of this invention is, in particular, that work time recording and work time accounting, but also productivity calculations and performance recording of individual users, can be carried out simply and efficiently.
• the user and / or employee does not need any identification cards, such as magnetic cards, etc., control patches or the like. This makes the system and method more cost-effective and less prone to errors.
• magnetic cards etc. do not have to be produced, nor does it require personnel-intensive administration of the cards.
• the employee can neither forget nor lose biometric features, unlike identification cards etc., and the security against fraud (such as counterfeiting, theft of cards) is significantly increased.
• identification by means of a user identification code (ID) which, for example, can easily be forgotten by the user and / or employee or, if the ID has been noted down by the user, for example, is fraudulently misused.
• ID user identification code
• the clear and secure user identification can be particularly important when charging the services or working hours of mobile users and / or employees.
• Another advantage is the additional recording of body condition data, which can increase security during user identification, for example by simultaneously scanning the body temperature of the finger and / or chemical / physical properties of the skin (skin tension, salinity, etc.) and / or when scanning the fingerprint. or the pulse is measured. This can be used to prevent fraudulent use of finger replicas in the system.
• safety regulations for the user can also be checked (eg alcohol content, for example, for long-distance drivers, body temperature in order to detect diseases, etc.).
• access to definable premises and / or the use of determinable devices is only granted to the user by the central unit if the identification and authorization have been successful.
• This has the advantage, among other things, that central access control or access control is carried out by the system at the same time. This simplifies the administration of these otherwise heterogeneous systems considerably.
• compliance with, for example, legal regulations, such as travel time restrictions for truck drivers, etc. can be easily and effectively controlled and enforced centrally. If, for example, the data acquisition client is installed in a truck, if the statutory working hours are exceeded by the user, the central unit could enforce the working times by means of an ignition interruption.
• the user data are also used to record and / or transmit spatial-specific and / or device-specific control data, access and / or use being granted by the central unit as a function of the control data.
• devices such as e.g. Machines or motor vehicles, operating parameters such as battery status, tank filling, tire pressure etc., are checked, the device being used for use only under predeterminable conditions and / or safety standards.
• the user is additionally identified by means of a user code, which user code is entered by the user via input elements of the data acquisition client.
• This variant has the advantage that the security standard for identification can be further increased by introducing an additional control parameter that should only be known to the specific user.
• the user code is generated based on the identification of the user and the transmitted biometric data by the central unit and transmitted to a mobile unit of the user via a second communication channel.
• the data can also be transmitted encrypted and / or signed.
• the mobile unit can comprise a mobile radio device and / or a PDA and / or a mobile node of a WLAN.
• the advantage of this invention lies in particular in the fact that by combining two separate communication channels, that is to say, for example in the case of a LAN / WLAN connection between the data acquisition client and the central unit and, for example, a bidirectional communication platform, such as, for example, a mobile radio network, such as a GSM (Global System for Mobile communication) , GPRS (Generalized Packet Radio Service) or UMTS network (Universal Mobile Telephone System) the advantages of the other platform can be combined in an advantageous manner for the invention.
• cellular networks such as GSM or UMTS networks have a high security standard.
• security in identifying a user is increased by the fact that the two communication channels are independent of one another. Fraud can thus be practically ruled out.
• the additional identification takes place by means of the user code by the central unit for the case in which the probability of the transmitted biometric data matching certain stored biometric data lies below the predefinable threshold value.
• new biometric data are recorded by the input unit of the data acquisition client and are stored in the database and assigned to the user.
• This variant has the advantage that the biometric data can be continuously improved or adapted for a user.
• the present method is thus improved both by a secure fall-back mechanism and also expanded by a meaningful initialization algorithm.
• the administration of the database in terms of costs and working hours can be significantly simplified and optimized.
• different central units access the same database with the stored ones biometric data of the users via a network, the database comprising means for identifying and / or authorizing the different central units and means for transmitting and receiving data over the network.
• the database can be designed as an individual network component. This has the advantage, among other things, that the registration service and identification service can be offered as a service, for example via the Internet.
• a mobile node of a WLAN or a mobile radio device is used as the data acquisition client.
• the data acquisition client is a mobile unit, special devices, such as Check trucks and limit them to safety standards, e.g. by checking the body condition parameters (temperature, alcohol content etc.) of the user or operating parameters (tire pressure, battery level, tank filling etc.) of the device.
• FIG. 1 to 3 illustrate a block diagram of a working time recording system in which biometric data are recorded, transmitted to a central unit and finally evaluated by means of a wage recording module.
• FIG. 4 shows a flow chart which schematically reproduces the sequence of a method or system according to the invention.
• user data of a user 1 are acquired by a data acquisition client 10,..., 16 and sent to a central unit 20/21 transmits a first communication channel 30/31.
• the data acquisition client 10,..., 16 comprises an input unit 101 for acquiring biometric data and / or body status data of a user 1.
• the biometric data and / or body status data of the user 1 are sent together with the user data via the first communication channel 30/31 transmitted to the central unit 20/21.
• the user data include, for example, the location and time of the acquisition of the biometric data or the body condition data.
• the biometric data can include, for example, fingerprints, iris recognition, DNS analysis, etc.
• the body status data can include, for example, body temperature, blood values (eg blood sugar etc.), alcohol values, pulse etc.
• the input unit 101 of the data acquisition client 10,..., 16 has corresponding scanning or measuring means of the prior art, by means of which the data is measured, for example by an appropriate API (Application Programmable Interface), and by the data acquisition client 10 16 can be queried.
• API Application Programmable Interface
• the data acquisition client 10 16 does not necessarily have to be a permanently installed one
• the connection 30, ie the first communication channel 30, between the data acquisition client 10,..., 16 and the central unit 20/21 can take place via different data channels, and not only directly via a specific communication network 30.
• the data can be sent between the data acquisition client 10, ..., 16 and the central unit 20/21, for example also via an interface (for example a wireless interface such as an infrared interface or Bluetooth) to a data terminal, and from the data terminal via a communication network 30, or by means of a removable chip card inserted into a data terminal, the data acquisition client 10,..., 16 are transmitted to the central unit 20/21 via this data terminal and a communication network.
• an interface for example a wireless interface such as an infrared interface or Bluetooth
• the data acquisition client 10,..., 16 and the central unit 20/21 each comprise a communication module.
• the communication modules can be used to exchange data via the communication network 30, ie the first communication channel 30.
• the communication network 30 comprises, for example, a mobile radio network, for example a GSM, GPRS or UMTS network or another, for example satellite-based, mobile radio network, or a fixed network, for example an ISDN Network, the public switched telephone network, a TV or radio cable network, or an IP network (Internet Protocol).
• the communication module comprises a mobile radio module for communication via the mobile radio network 30.
• the above-mentioned user data for example with GSM / SMS, GSM
• can be transmitted by means of the communication module / USSD, GPRS or UMTS are transmitted to the central unit 20/21.
• the data acquisition client 10, ..., 16 is bidirectionally connected to a central unit 20/21 via the network 30.
• the connection between the central unit 20 and the data acquisition client 10,..., 16 can be a protected channel (security channel) or the security mechanisms required for protection (encryption, limited time window, electronic signatures, etc.) in the central unit 20 and the
• Data collection client 10 16 include.
• Data acquisition clients 10, ..., 16 can also include DAB / MExE applets. Any number of data acquisition clients 10, ..., 16 can be assigned to a central unit 20. A plurality of central units 20 can in turn be assigned to a superordinate computing unit which combines the data from the central units 20. At operator level in such multi-tier systems, e.g. it is determined which calculations, data compression and / or data synchronization are carried out at which level of the central units 20. This system has the advantage that complete company structures can be mapped at system level (e.g. company / branch / cost center / department / employee).
• the user 1 is identified by the central unit 20/21 based on the user data and the biometric data or body condition data by means of a user database 40.
• the central unit 20/21 compares the transmitted user data and / or biometric data and / or body condition data with corresponding data of the users of the system stored in the user database 40.
• a user 1 is identified by means of the central unit 20/21 if the probability of the transmitted biometric data matching certain stored biometric data lies above a predefinable threshold value.
• the database 40 can directly 22 with the Central unit 20/21 can be connected or can be implemented as an isolated network component of the communication network 30, the central unit 20/21 and the database 40 communicating via the communication channel 23.
• At least one user status assigned to a data record of the identified user is modified based on time (for example time / day / month / year) and / or location of the acquisition of the user data and / or biometric data and / or body status data of the user 1 and in the Database saved.
• the data records of the users are transmitted to a wage recording module 50 and evaluated and / or checked by means of the wage recording module 50.
• the data records can be transmitted to the wage recording module 50 periodically (for example using GSM / SMS, GSM / USSD, GPRS or UMTS) or each time a defined value is reached (a number of modified records and / or a certain total of services or hours worked, etc.).
• the wage recording module 50 can, for example, be connected via an interface to a financial institution which triggers the payment of the wages to the employee for the services or working hours performed.
• a financial institution which triggers the payment of the wages to the employee for the services or working hours performed.
• other calculation modules eg assigned in the same way as the wage recording module 50
• Such modules can include, for example, project planning and administration, service entry, order processing, warehouse management, time access control to rooms and devices, model calculations (productivity optimization of departments, productivity forecasts etc.) and / or PPS (productivity monitoring) etc.
• the system can include connections to evaluation units, such as office products, report systems (eg List & Label, Cristal Reports etc.). Based on the prevailing system, planning tools can be used to optimize companies and their structures in a simple manner (e.g. by means of model calculations of employee assignments).
• evaluation units such as office products, report systems (eg List & Label, Cristal Reports etc.).
• report systems eg List & Label, Cristal Reports etc.
• planning tools can be used to optimize companies and their structures in a simple manner (e.g. by means of model calculations of employee assignments).
• the central unit 20/21 can in particular allow access to determinable premises and / or the use of controllable devices control the user 1 by the central unit 20/21, based on the identification and authorization of a specific user 1.
• Electronic locks for example, can be controlled via the data acquisition client 10, ..., 16 and / or central unit 20/21.
• compliance with, for example, legal regulations, such as travel time restrictions for truck drivers, etc. can be controlled and enforced centrally.
• the central unit could enforce the working times by means of an ignition interruption.
• the body condition data can be used, for example, to check and / or check the alcohol consumption by the user during working hours.
• the user data can also be used to record and / or transmit spatial-specific and / or device-specific control data, the access and / or the use in turn being controllable by means of the central unit 20/21 depending on the control data. With the control data, access to individual rooms and building sections can be granted selectively according to predeterminable criteria.
• the control data would then include the corresponding parameters (machines or motor vehicles, operating parameters such as battery status, tank filling, tire pressure, etc.).
• an additional identification can be made by means of a user code (ID: Identification Number), which user code is entered by the user 1 via input elements 102 of the data acquisition client 10,..., 16.
• the input elements 102 can be, for example, keyboards, graphic ones Input means (mouse, trackball, eye tracker with Virtual Retinal Display (VRD) etc.), but also include IVR (Interactive Voice Response) etc.
• FIG. 3 shows a further exemplary embodiment in order to further increase the security of the system or to simplify the handling of the system for the user and / or operator.
• the user code is generated based on the identification of the user 1 and the transmitted biometric data by the central unit 20/21 and transmitted to a mobile unit 2 of the user 1 via a second communication channel 32 (see FIG. 3).
• the user code can also include, for example, an International Mobile Subscriber Identity (IMSI) or an MSISDN (Mobile Subscriber ISDN), which is used for identification in a mobile radio network, the user identification, for example, in the chip card, for example a SIM card (Subscriber Identification Module) , is saved.
• IMSI International Mobile Subscriber Identity
• MSISDN Mobile Subscriber ISDN
• the mobile unit 2 can comprise one or more interfaces, in particular a device interface, for example a contactless interface, for example an infrared interface, for example a high speed infrared (HSIR) interface or an IrDA interface (infrared data association), an inductive interface , for example a Radio Frequency Identification (RFID) interface, a Home RF (Radio Frequency) interface, a Digital European Cordless Telecommunications (DECT) interface or another Cordless Telecommunications System (CTS) interface, or a high-frequency radio interface, For example, a so-called “Bluetooth interface”. Via such an interface, the mobile unit 2 can exchange data with external data terminals outside the mobile unit 2, which have a corresponding interface.
• a device interface for example a contactless interface, for example an infrared interface, for example a high speed infrared (HSIR) interface or an IrDA interface (infrared data association), an inductive interface , for example a Radio Frequency Identification (RFID) interface,
• the second communication channel 32 comprises, for example, a mobile radio network, for example a GSM, GPRS or UMTS network or another, for example satellite-based, mobile radio network, or a fixed network, for example an ISDN network, the public switched telephone network, a TV or radio network. Cable network, or an IP network (Internet Protocol), such as a WLAN and / or the international backbone Internet.
• the mobile Unit 2 can comprise, for example, a mobile radio device and / or a PDA and / or a mobile node of a WLAN.
• the additional identification by means of user code is carried out by the central unit 20/21 in cases in which the probability of the transmitted biometric data matching certain stored biometric data lies below the predefinable threshold value , That that the additional identification is used as a fall-back method or algorithm. If the additional identification of user 1 using the user code was successful, e.g. Acquire new biometric data by the input unit 101 of the data acquisition client 10,..., 16 and store it in the database 40 assigned to the user 1. As a result, the biometric data can be continuously improved or adapted for a user. This extends the present method both through a secure fall-back mechanism and through a sensible initialization algorithm.
• the administration of the database in terms of costs and working hours can be significantly simplified and optimized. For example, it is even possible to capture new and unregistered users with new biometric data and / or body status data and / or user data, since an identification can be verified by means of the mobile unit 2. This is not possible with conventional systems.
• FIG. 2 shows an exemplary embodiment in which different central units 20/21 access the same database 40 with the stored biometric data of the users via a network 31, the database 40 having means 41 for identifying and / or authorizing the different central units 20/21 and Means 41 for transmitting and receiving data via the network 31 comprises.
• the database can thus be designed as an individual network component.
• the working time recording method or system or the recording service and identification service can thus be offered in isolation as a service, for example via the Internet.
• FIG. 4 schematically shows a possible sequence of the method according to the invention.
• a user can, for example, activate and / or initialize identification or work time recording 71 by touching the input unit 101 of a data acquisition client 10,..., 16.
• step 72 the biometric data and / or body status data of the user 1 is entered using the input unit 101 recorded and transmitted together with the user data to the central unit 20/21 via a first communication channel 30/31. Based on the recorded data, the user 1 is identified 73 by the central unit 20/21. If the user 1 can be identified 74, the user data (eg location and time) are analyzed 75 and a user status (eg coming / going) is determined 76 In a further step, the further data are analyzed (for example the body status data of the user) 77 and stored together with the other data in a user record of user 1. If the user 1 cannot be identified 79, the process can either be terminated 84 or the user 1 can be recorded 80 as a new user.
• the user data eg location and time
• a user status eg coming / going
• step 86 the new biometric data are finally stored in the data record of user 1, whereupon, for example, it can be continued with step 75 or must be started again in step 71 or 72.

Landscapes

• Physics & Mathematics (AREA)
• General Physics & Mathematics (AREA)
• Engineering & Computer Science (AREA)
• Human Computer Interaction (AREA)
• Mobile Radio Communication Systems (AREA)
• Management, Administration, Business Operations System, And Electronic Commerce (AREA)
• Measurement Of The Respiration, Hearing Ability, Form, And Blood Characteristics Of Living Organisms (AREA)

Applications Claiming Priority (1)

Publications (1)

Family

ID=33520333

Family Applications (1)

Country Status (6)

Families Citing this family (15)

Family Cites Families (11)

• 2003
  • 2003-06-24 WO PCT/CH2003/000413 patent/WO2004114226A1/de active Application Filing
  • 2003-06-24 US US10/562,076 patent/US20070096869A1/en not_active Abandoned
  • 2003-06-24 AU AU2003240355A patent/AU2003240355B2/en not_active Expired - Fee Related
  • 2003-06-24 CN CNB038266717A patent/CN100541542C/zh not_active Expired - Fee Related
  • 2003-06-24 CA CA002530152A patent/CA2530152A1/en not_active Abandoned
  • 2003-06-24 EP EP03729771A patent/EP1636763A1/de not_active Withdrawn

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events